Cyberark Privileged Access Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cyberark Privileged Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2024-54840cyberarkprivileged_access_manager
EPSS score
0.16%
PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.4.2CVE-2024-57967cyberarkprivileged_access_manager
EPSS score
0.23%
PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping.